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ABSTRACT 


In this project, we propose the Secure Data Sharing in Clouds 
(sedasc) methodology that provides data confidentiality and integrity; 
access control; data sharing (forwarding) without using compute- 
intensive re-encryption; insider threat security; and forward and 
backward access control. The Sedasc methodology encrypts a file 
with a single encryption key. Two different key shares for each of the 
users are generated, with the user only getting one share. The 
possession of a single share of a key allows the Sedasc methodology 
to counter the insider threats. The other key share is stored by a 
trusted third party, which is called the cryptographic server. We 
implement a working prototype of the Sedasc methodology and 
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evaluate its performance based on the time consumed during various 


operations. 
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1. INTRODUCTION 

Cloud computing is rapidly emerging due to the 
provisioning of elastic, flexible, and on demand 
storage and computing services for customers. The 
data are usually encrypted before storing to the cloud. 
The access control, key management, encryption, and 
decryption processes are handled by the customers to 
ensure data security. A single key shared between all 
group members will result in the access of past data to 
a newly joining member. The SeDaSC methodology 
works with three entities as follows: 1) users; 2) a 
cryptographic server (CS); and 3) the cloud. The data 
are decrypted and sent back to the user. For a newly 
joining member, the two portions of the key are 
generated, and the user is added to the ACL. 


2. LITERATURE SERVEY 

“Distributing Data for Secure Database Services” 
Vignesh Ganapathy, Dilys Thomas, Dilys Thomas, 
Rajeev Motwani, Published In 2010 


The advent of database services has resulted in 
privacy concerns on the part of the client storing data 
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with third party database service providers. Previous 
approaches to enabling such a service have been 
based on data encryption, causing a large overhead in 
query processing. A distributed architecture for 
secure database services is proposed as a solution to 
this problem where data was stored at multiple sites. 
The distributed architecture provides both privacy as 
well as fault tolerance to the client. In this paper we 
provide algorithms for distributing data: our results 
include hardness of approximation results and hence a 
heuristic greedy hill climbing algorithm for the 
distribution problem partitioning the query at the 
client to queries for the various sites is done by a 
bottom-up state-based algorithm we provide. Finally, 
the results at the sites are integrated to obtain the 
answer at the client. We provide an experimental 
validation and performance study of our algorithms. 


3. EXISTINGSYSTEM 

The Secured BaaS architecture is tailored to cloud 
platforms and does not introduce any intermediary 
proxy or broker server between the client and the 
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cloud provider. Secured BaaS relates more closely to 
work using encryption to protect data managed by UN 
trusted databases. Main issue to address is that 
cryptographic techniques cannot be natively applied to 
standard DBaaS. Secured BaaS moves away from 
existing architectures that store just tenant data in the 
cloud database and save metadata in the client 
machine or split metadata between the cloud database 
and a trusted proxy. 


3.1. Disadvantages of the existing system 

> Even though they are using secure DBaaS means 
Distributing data among different providers and it 
give more secure, but its functions cannot be 
taking advantage of secret sharing outsourced to 
an untrusted cloud provider. 


It Cannot Store them in encrypted format. 


When considering scenarios where multiple 
clients can access the same database concurrently. 


Client-n 


4. PROPOSEDSYSTEM 

The proposed architecture is subject to the TPC-C 
standard benchmark for different numbers of clients 
and network latencies show that the performance of 
concurrent read and write operations not modifying 
the Secured BaaS database structure are comparable 
to that of unencrypted cloud Database. Even metadata 
confidentiality is guaranteed through encryption. This 
table uses one row for the database metadata, and one 
row for each table metadata. This encryption key is 
called a master key. Only trusted clients that already 
know the master key can decrypt the metadata and 
acquire information that is necessary to encrypt and 
decrypt tenant data. Each metadata can be retrieved 
by clients through an associated Id. This Id is 
computed by applying a 


Message Authentication Code (MAC) function to the 
name of the object described by the corresponding 
row. 
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5. CONCLUSION 

To conclude in this project, Open network, 
virtualization, monitoring, and security technologies 
to deploy multi-tier services (e.g., compute clusters) 
as machines on distributed infrastructures, combining 
both data center resources and remote cloud 
resources, according to allocation policies. 
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